diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index e252e58..3cd7f85 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -92,7 +92,7 @@ jobs:
             > "$evidence_dir/corpus-after.manifest.sha256"
       - name: Preserve bounded fuzz evidence
         if: always()
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: fuzz-${{ matrix.target }}-evidence
           path: |